Title: Targeted Delivery of Informational Content wjjjj^ 

©Privacy Protection WKw 
Inventor(s): Juels 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (7216/66) 
Atty/ Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 1 of 6 





o 



Title: Targeted Delivery of Informational Content \i 

Privacy Protection ^ 

Inventor(s): Juels 

Serial No. 09/802,278 

Atty Docket No. RSA-044 (7216/66) 

Atty/ Agent: John D. Lanza 

Express Mail Mailing Label No. EL750476202US 

Sheet 2 of 6 





120c 



120a 



120b 



FIG. 2 



Privacy Protection 
Inventor(s): Juels 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (7216/66) 
Atty/Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 3 of 6 



31 



as 

CO 

□ 

ry 
ru 
m 

«i 

o 

CO 
M 
W 

o 



32 



Qj C 2 > Q ^ 


f 


A 




r 


Q computes ri = f (P Ci ) 



33 



34 



35 



1 


f 


^1 — 9- J\ 




r 


ri causes A to select adi 




r 


adi 

Q « . A 



FIG. 3 



nut laigticu utu ys^iy \ji iiiivjiiiiaiiuiiai vajiiicui wilij 

Privacy Protection 
Inventor(s): Juels 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (7216/66) 
Atty/Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 4 of 6 





1 » 


(xi, rO (x 2 , r 2 ) (x 3 , r 3 ) 
PS ^ A 






rj causes A to select ad ri < 


1 



Q, C 2 , C3 <- 



adi 



(xi, adi) (x 2 , ad 2 ) (x 3 , ad 3 ) 
PS ^ A 



PS 



FIG. 4 



60 



41 



Title: Targeted Delivery of Informational Content witn 
Privacy Protection 
Inventor(s): Juels 
Serial No. 09/802,278 
Atty Docket No. RSA-044 (721 6/66) 
Atty/Agent: John D. Lanza 
Express Mail Mailing Label No. EL750476202US 
Sheet 5 of 6 



Ci.O>.C « 




I 






r 


Ci computes n = 
C2 computes V2 = 
C3 computes r3 = 


f(P C i) and encrypts E y [ri] 
f(Pc2) and encrypts E y [r 2 ] 
f(Pc3) and encrypts E y [r 3 ] 


. 



Ci 

c 2 
c 3 



{Ey[ri],xj} 



{ E y [r 2 ], x 2 } 
{ Ey[r 3 ], x 3 } 



> BB 



BB 



BB 



Servers collect Vj = { E y [r,-], Xi } . 



k 



i = \ 



Servers mix Vi by random secret permutation a x 

to obtain V 3 = {r cl G), E y [cr } (/)])} k 

i = 1 



Servers replace each rj in F 2 with ad rj 

to obtain V' 2 = {ad r , £>,|>i(z)])} k 
i = 1 



Servers mix V' 2 by random secret permutation o 2 

to obtain V 3 = {(^[ad o2(i) ], a 2 (i)} * 
z = 1 



51 



52 



53 



54 



55 



56 



57 



Servers apply quorum controlled asymmetric proxy re-encryption 

to obtain V 4 =(E yd [ad , ri ],9 * • 

i = 1 



. 1 

E 

Ci, C 2 , C3 -4 


y C i[adn] 




A 



59 



Ci, C 2 , C 3 decrypt E yci [ad ri ] to receive 



FIG. 5 



58 



Title: Targeted Delivery of Informational Content wijj 

Privacy Protection 

Inventor(s): Juels 

Serial No. 09/802,278 

Atty Docket No. RSA-044 (7216/66) 

Atty/ Agent: John D. Lanza 

Express Mail Mailing Label No. EL750476202US 

Sheel 6 of 6 



C <■ 



C computes r = f(P) and encrypts E y [r] 



E y [r,] 



> BB 



Servers encrypt ^ to generate Ui = {(j, E y [adj])} n j=1 



Servers mix Ui by random secret permutation a 
to obtain U 2 = (EJpQ)], E y [ad a(j) }) n J=l 



Servers perform a distributed plaintext equality test to 
find E y [f] ~ E y [r] and obtain U 3 = (E y [rl E y [ad r ]) 



Servers apply quorum controlled asymmetric 
proxy re-encryption to obtain E yci [ad r ] 



C 



Eye 



ad r ] 



C decrypts E yci [ad r ] to receive ad r 



FIG 



